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USER DEVICE AND SYSTEM FOR TRAFFIC 
MANAGEMENT AND CONTENT 
DISTRIBUTION OVER A WORLD WIDE 
AREA NETWORK 

CROSS-REFERENCES TO RELATED 5 
APPLICATIONS 

The present application claims priority to U.S. Provisional 
Application No. 60/166,906 filed Nov. 22, 1999, commonly 
owned, and hereby incorporated by reference for all pur- 
poses. 10 

BACKGROUND OF THE INVENTION 

The present invention relates to world wide area network- 
ing. More particularly, the invention provides a technique 
including a user interface device and system for using a 15 
global traffic management system coupled to a plurality of 
content servers for a service fee. But it would be recognized 
that the invention has a much broader range of applicability. 
For example, the invention can also be applied to other types 
of networks, and the like. 20 

The Internet is a world wide "super-network" which 
connects together millions of individual computer networks 
and computers. The Internet is generally not a single entity. 
It is an extremely diffuse and complex system over where no 
single entity has complete authority or control. Although the 
Internet is widely know for one of its ways of presenting 25 
information through the World Wide Web (herein "Web"), 
there are many other services currently available based upon 
the general Internet protocols and infrastructure. 

The Web is often easy to use for people inexperienced 
with computers. Information on the Web often is presented 30 
on "pages" of graphics and text that contain "links" to other 
pages either within the same set of data files (i.e., Web site) 
or within data files located on other computer networks. 
Users often access information on the Web using a 
"browser" program such as one made by Netscape Com- 35 
munications Corporation (now America Online, Inc.) of 
Mountain View, Calif, or Explorer™ from Microsoft Cor- 
poration of Redmond, Wash. Browser programs can process 
information from Web sites and display the information 
using graphics, text, sound, and animation. Accordingly, the 40 
Web has become a popular medium for advertising goods 
and services directly to consumers. 

As time progressed, usage of the Internet has exploded. 
There are literally millions of users on the Internet. Usage of 
the Internet is increasing daily and will eventually be in the 45 
billions of users. As usage increases so does traffic on the 
Internet. Traffic generally refers to the transfer of informa- 
tion from a Web site at a server computer to a user at a client 
computer. The traffic generally travels through the world 
wide network of computers using a packetized communica- 50 
tion protocol, such as TCP/IP. Tiny packets of information 
travel from the server computer through the network to the 
client computer. Like automobiles during "rush hour" on 
Highway 101 in Silicon Valley, the tiny packets of informa- 
tion traveling through the Internet become congested. Here, 55 
traffic jams which cause a delay in the information from the 
server to the client occur during high usage hours on the 
Internet. These traffic jams lead to long wait times at the 
client location. Here, a user of the client computer may wait 
for a long time for a graphical object to load onto his/her <>o 
computer. 

From the above, it is seen that an improved way to transfer 
information over a network is highly desirable. 

SUMMARY OF THE INVENTION 65 

According to the present invention, a technique including 
a user interface device and system for global traffic man- 
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agement and content distribution is provided. In an exem- 
plary embodiment, the method is applied to a world wide 
network of computers, such as the Internet or an internet. 

In a specific embodiment, the invention provides a service 
based system for traffic management and content distribu- 
tion for a plurality of users over a world wide network of 
computers. The system includes a global traffic management 
device coupled to a world wide area network. The global 
traffic management device being provided to load balance 
across multiple origin sites. The system also has a content 
delivery network coupled to the global traffic management 
device. The content delivery network provides support con- 
tent distribution and delivery of streaming media. The 
system also has a computing device including a computer 
memory coupled to the global traffic management device. 
The system also has an accounting module coupled to the 
computing device. The accounting module tracks a usage of 
the global traffic management device and the content deliv- 
ery network for a customer of the global traffic management 
device and the content delivery network to determine a 
service fee for the usage based upon a period time frequency. 

Many benefits are achieved by way of the present inven- 
tion over conventional techniques. For example, the present 
invention can be implemented using conventional hardware 
and software in an easy manner in some embodiments. The 
invention can also be applied to conventional Web hosting 
sites. In other aspects, the invention provides an easy way 
for a Web site to using a content distribution network 
without spending capital costs. Depending upon the 
embodiment, one or more of these benefits may be achieved. 
These and other benefits will be described in more through- 
out the present specification and more particularly below. 

Various additional objects, features and advantages of the 
present invention can be more fully appreciated with refer- 
ence to the detailed description and accompanying drawings 
that follow. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a simplified diagram of a system according to an 
embodiment of the present invention; 

FIG. 2 is a more detailed diagram of probes used in the 
system according to an embodiment of the present inven- 
tion; 

FIG. 3 is a more detailed diagram of a caching sequence 
used in the system according to an embodiment of the 
present invention; 

FIG. 4 is a simplified flow diagrams of methods according 
to embodiments of the present invention; 

FIG. 4A is a simplified system diagram according to an 
embodiment of the resent invention; 

FIGS. 5A to 5H are simplified diagrams of content 
delivery network ccording to an embodiment of the present 
invention; and 

FIGS. 6A to 6E are simplified diagrams of global traffic 
management system according to an embodiment of the 
present invention 

DESCRIPTION OF THE SPECIFIC 
EMBODIMENTS 

According to the present invention, a technique including 
a user interface device and system for global traffic man- 
agement and content distribution is provided. In an exem- 
plary embodiment, the method is applied to a world wide 
network of computers, such as the Internet or an internet. 

In a specific embodiment, the invention provides a user 
interface device and system for providing a shared GTM and 
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CDN (collectively Universal Distribution Network) for a 
service fee, where the customer or user does not need to 
purchase significant hardware and/or software features. The 
present interface device and system allows a customer to 
scale up its Web site, without a need for expensive and 5 
difficult to use hardware and/or software. In a preferred 
embodiment, the customer merely pays for a service fee, 
which can be fixed, variable, lump some, or based upon a 
subscription model using the present system. The present 
device and system are preferably implemented on a system 10 
including a novel combination of global traffic management 
and content distribution. 

An overall system diagram 100 is illustrated in FIG. 1. 
The diagram is merely an example, which should not unduly 
limit the scope of the claims herein. One of ordinary skill in 15 
the art would recognize many other variations, 
modifications, and alternatives. As shown, the system 100 
includes a variety of features to defined the Universal 
Delivery Network (UDN). The UDN has a combined con- 
tent delivery network 103 and 104 and a global traffic 20 
management network 105, which are coupled to each other. 
This eliminates the need for independent CDN and GTM 
solutions. The UDN can be implemented as a single out- 
sourced solution or service to a customer. When deployed 
across the WAN, it creates a unified network that provides a 25 
universal solution for content routing and high availability 
delivery. 

Customers can leverage the size, scope, and location of 
the UDN to store content such as HTML, images, video, 
sound and software for fast and highly available access by 30 
clients. The network can also incorporate customer origin 
sites 107, 109 that will then benefit from shared load 
balancing and traffic management. Customers with gener- 
ated content, such as search engines, auctions and shopping 
carts, can use the latter feature to add their own content 35 
servers to the network. In some embodiments, the system 
typically requires no software or hardware to be installed or 
run at a customer site. A web interface is available for 
display of the network's current status as well as historical 
statistics on a per customer basis. 

The system functions by mapping hostnames, such as 
www.customer.com to a customers origin servers 107 and 
109. Hie local DNS 113 queries the traffic management 
system 105 for name resolution of the customers web site 45 
and receives a response specifying the server best suited to 
handle the request, either customer origin servers 107 or 
servers 103 located in the UDN. When the client 111 
requests a customer homepage, tags within the HTML direct 
the imbedded static content to the network of cache servers 5Q 
103 and 104. In this example the static content may be 
tagged with a domain name like customer.speedera.com. 
Each local DNS in the example is directed to a different 
resource for each hostname based on several factors, such as 
proximity to the resource, network congestion, and server 55 
load. 

In this example, www.customer.com is mapped to the 
customer origin servers represented by customer origin Sites 
1 109 and 2 107. Customer.speedera.net is mapped to a 
collection of delivery nodes represented by point of presence 60 
servers, i.e., POPs 103, 104. As merely an example, a 
method for using such a UDN is provided below. 

1. The client 111 requests a customer home page: 
www.customer.com from a local DNS 113. 

2. The local DNS 113 queries the traffic management 65 
system 105 for name and address resolution and 
receives a reply 125, 127 indicating the optimal cus- 
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tomer origin site to retrieve the homepage 131. In this 
step, the traffic management system still looks at many 
if not all factors; network health, server health, packet 
loss, cost, etc. to determine the optimal customer origin 
site. 

3. The client connects to the site and retrieves the home 
page (solid blue line) 123, 121. 

4. An object with the image tag specifying http:// 
customer.speedera.net/www.customer.com/hello.gif is 
found in the HTML of the homepage. 

5. The local DNS queries the traffic management system 
for name and address resolution. 

6. The traffic management system looks 129, 131 at 
factors such as network performance and server load 
and returns the address of the POP best suited to serve 
the requested content. 

7. The client then retrieves the content from the specified 
delivery node 117, 119. 

This sequence of steps is merely illustrative. The steps can 
be performed using computer software or hardware or a 
combination of hardware and software. Any of the above 
steps can also be separated or be combined, depending upon 
the embodiment, some cases, the steps can also be changed 
in order without limiting the scope of the invention claimed 
herein. One of ordinary skill in the art would recognize 
many other variations, modifications, and alternatives. 
Details of each of the features noted above are more fully 
described below. 

The DNS server (DNS) can be thought of as the traffic 
director of the system. It contains a mapping of where 
resources (grouped by hostnames) have been allocated as 
well as the current state of each resource and their avail- 
ability to each client. It receives the static information (the 
mappings) from the configuration file and the dynamic 
information (resource availability) from the probes. The 
configuration file also instructs the DNS server how to 
weight the various criteria available when making its deci- 
sions. The DNS is a fully functional DNS server and is 
compatible with current versions of BIND. Decision criteria 
cover such areas as resource availability, resource load, 
latency, static mapping configuration, persistence 
requirements, fail over logic, weighting parameters, and 
others, each of which can be alone or combined. 

Multiple DNS servers are deployed to provided high 
availability. The DNS servers are spread throughout the 
network to avoid single points of failure. The DNS server 
was designed from the beginning with the ability to proxy 
requests. This proxy ability combined with algorithms to 
divide client latency and persistence information across a 
group of DNS servers greatly reduces the problems associ- 
ated with WAN replication and synchronization. In the event 
a request arrives at a DNS server that is not authoritative for 
this client, the DNS can proxy the request to any number of 
servers to find an authoritative answer. 

The DNS server logs both request and operational data to 
the database for subsequent viewing. Both real-time and 
historical views are available. The request data allows the 
administrator and customer to see to the number of requests 
directed to each POP on a per hostname basis. The opera- 
tional data provides statistics about the DNS server and 
would typically only be viewed by the administrator. 

The present system also uses one or more probes to detect 
information about certain criteria from the network. There 
are probes including a NetProbes, a ServiceProbe and a 
LatencyProbe. ServiceProbes test local server resources 
while LatencyProbes conduct network round trip tests to 
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clients. Each POP in the network is assigned a ServiceProbe The individual latency data is sent to the DNS servers 

and a LatencyProbe — these can be separate machines but in while operational data of each method, their success rates, 

most cases, the same machine will perform both types of etc are sent to the database. This allows the current and new 

probe. methods to be monitored and managed. LatencyProbes 

The NetProbes are responsible for providing the traffic 5 perform latency tests to the local client DNS (LDNS). The 

management system with service and latency metrics. The LatencyProbes build a table of LDNS' to test over time, 

metrics are reported to the DNS server and LogServers. FIG. receiving the list of which DNS client IP addresses to probe 

2 is a simplified diagram 200 of these probes according to from the DNS Servers in the network, 

embodiments of the present invention. This diagram is In a specific embodiment, the delivery nodes are the edge 

merely an example which should not limit the scope of the delivery servers of the network. The invention can support 

claims herein. One of ordinary skill in the art would recog- anv types of IP based delivery servers including but not 

nize many variations, alternatives, and modifications. The limited to HTTP, SSL, FTP, Streaming, NNTP, and DNS 

diagram 200 includes a POP 201, which includes a Net- servers. In preferred embodiments, the invention uses an 

Probes server. Service probes monitor the POP servers to test HrrP server and SSL The HTTP and SSL 

the availability and load of the services they support The are idcntiad ^ the exception of the encryption 

!he DN^ ™ d ° n ^ data t0 h ° m ^ SSL Cache in 501116 

ao-tiu'j* • ***<• *• c embodiments. These servers have a proxy component that 

A ServiceProbe determines service metric information for . . . . . 

servers in the UDN and reports them to the DNS server. aUows f hem t0 fiU ™che by making requests to an 

Service metrics are one of the decision criteria used by the ongm ate if a requested object is not m the cache. A method 

DNS to make its routing determinations. Each server in the 20 according to the invention can be bnefly o^scribed as 

UDN supports one or more services— a web server provides follows in reference to the simplified diagram 300 of FIG. 3: 

HTTP service, a FTP server provides FTP service. The 1. An initial user makes a request to the cache for an 

service probe uses various approaches for gathering data — a object http://customer.speedera.netAvww.cutomer.com/ 

service test and statistical monitoring. The value of a service images/test.gif (Step 1); 

metric is dependent on the metric type and it's implemen- 25 2. The cache, discovering that it does not have the object, 

tation. will find the name of the origin site in the URL 

The HTTP service is an example of the service test (www.customer.com) and make a request to the origin 

approach. Rather then try to test the individual characteris- site for /images/test.gif (Step 2); 

tics of a server that may have an impact on performance the 3 ^ ^ cacQe receives ^ object {{ fa ^ Qn ^ 

service itself is evaluated as a user would experience it, in nn , „« _ . . 4 . • - t - , „„„ &,u™„ M * 

, , , t j r / 4 f r\ a t\ti 30 and memory and returned to the initial user. Subsequent 

order to determme its response time and validity. LOADP, a . , r , • .... 

process running on each server, is implemented as a statis- users who make requests for the same object will be 

tical monitor and is used as a generic service for testing satisfied by the cache directly (Step 3). 

purposes. LOADP provides direct measurement of many ™* sequence of steps is merely illustrative. The steps can 

system parameters including CPU load, memory usage, be performed using computer software or hardware or a 

swap and disk status, and is used in load balancing decisions. 35 combination of hardware and software. Any of the above 

Hostnames in the system are mapped to service types. steps can also be separated or be combined, depending upon 

This allows a given server to support multiple services and the embodiment. In some cases, the steps can also be 

be evaluated independently for each of them. When a changed in order without limiting the scope of the invention 

request for a particular hostname arrives at a DNS, the claimed herein. One of ordinary skill in the art would 

service associated with that hostname is compared on each 40 recognize many other variations, modifications, and alter- 

of the machines to find the best-suited server. The data from natives. 

the probes are sent to both the DNS as well as the database. Other protocols will work in a similar fashion unless there 

By sending the data to the database, it allows the perfor- is a time concern with loading the first request. An example 

mance of the network to be viewed in real time as well as of this is a live streaming event or large file downloads 

over a period of time. 45 (patches or video on demand). In these cases the caches may 

Every server in the UDN is housed in a POP and each POP be pre-filled with the data that they need to serve. This 
has a Latency Probe assigned to it, as shown. The Latency pre -filling may take place over terrestrial lines or via satellite 
Probes determine the latency from their location to other in some cases. Statistics about data delivered from the 
locations on the Internet (specifically to client DNS' request- delivery nodes are reported through the logging system to 
ing name resolution). The DNS' use this information in 50 the database for subsequent viewing and analysis, 
determining the best-suited server for a particular request. The system also has a user interface. Here, engineering 
The list of locations that are used in order to determine the staff as well as customers can login to monitor and admin- 
latency is driven by the DNS. When it is determined by a ister the network access from nearly any Internet connected 
DNS server that its current information regarding latency web browser (with proper authentication). The user interface 
between "x" number of POPs and a client's local DNS has 55 includes tables and graphs from the database. Data arrives at 
become stale, it will instruct the probe for that particular the user interface through the Logging System. This system 
POP to recalculate the latency. has two parts: Log Distributor daemons and Log Collector 

The probes utilize a collection of methods to determine daemons. This daemon monitors a defined directory for 

the latency based on cost. The probe uses the least expensive completed log files. Log files are defined as complete when 

method first and moves on to more expensive methods if no 60 they reach a defined size or age. A logging API which all 

results are determined. The probe is designed so new meth- resources share controls the definitions of size and age. 

ods can be plugged in as they are developed. The methods When the Log Distributor finds completed log files it is able 

can be either active or passive and are prioritized based on to send them back to one of many Log Collector daemons 

accuracy. Active methods may take the form of ping or for insertion in the database. 

trace route but are typically more sophisticated. Passive 65 As noted, the present network has many advantages. The 

methods could reference local BGP tables to determine cost network has as comprehensive, extensible, multi-faceted 

metrics. global traffic management system as its core, which is 
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coupled to a content delivery network. Further details of the 
present content delivery network and global traffic manage- 
ment device are provided below. According to the present 
invention, a method for providing service to customers is 
provided. Details of such service are provided below. 

FIG. 4 is a simplified flow diagram of a novel service 
method 400 according to an embodiment of the present 
invention. The diagram is merely an example, which should 
not unduly limit the scope of the claims herein. One of 
ordinary skill in the art would recognize many other 
variations, modifications, and alternatives. As shown, the 
method begins at start, step 401. The method connects (step 
403) a client to a server location through a world wide 
network of computers. The world wide network of comput- 
ers can include an internet, the Internet, and others. The 
connection occurs via a common protocol such as TCP/IP. 
The client location is coupled to a server, which is for a 
specific user. The user can be any web site or the like that 
distributes content over the network. As merely an example, 
the user can be a portal such as Yahoo! Inc. Alternatively, the 
user can be an electronic commerce site such as Amazon- 
.com and others. Further, the user can be a health site. 
Information sites include the U.S. Patent Office web site, 
educational sites, financial sites, adult entertainment sites, 
service sites, business to business commerce sites, etc. There 
are many other types of users that desire to have content 
distributed in an efficient manner. 

In a specific embodiment, the user registers its site on the 
server, which is coupled to a content distribution server 
coupled to a global traffic management server. The user 
registers to select (step 407) a service from the server. The 
service can be either a traffic management service (step 414) 
or a traffic management service and content distribution 
service (step 411). Depending upon the embodiment, the 
user can select either one and does not need to purchase the 
capital equipment required for either service. Here, the user 
merely registers for the service and pays a service fee. The 
service fee can be based upon a periodic time frequency or 
other parameter, such as performance, etc. Once the service 
has been requested, the user performs some of the steps 
noted herein to use the service. 

Next, the method processes (step 423) the user's request 
and allows the user to use the content distribution network 
and/or global traffic management network, where the user's 
web pages are archives and distributed through the content 
distribution network in the manner indicated herein. The 
user's web site should become more efficient from the use of 
such networks. Once a periodic time frequency or other 
frequency has lapsed (step 419), the method goes to an 
invoicing step, step 417. The invoicing step sends (step 427) 
an invoice to the user. Alternatively, the process continues 
until the periodic time frequency for the designated service 
lapses via line 422. The invoice can be sent via U.S. mail, 
electronic mail, or the like. The method stops, step 425. 
Alternatively, the invoicing step can deduct monetary con- 
sideration through an electronic card, e.g., debit card, credit 
card. 

This sequence of steps is merely illustrative. The steps can 
be performed using computer software or hardware or a 
combination of hardware and software. Any of the above 
steps can also be separated or be combined, depending upon 
the embodiment. In some cases, the steps can also be 
changed in order without limiting the scope of the invention 
claimed herein. One of ordinary skill in the art would 
recognize many other variations, modifications, and alter- 
natives. It is also understood that the examples and embodi- 
ments described herein are for illustrative purposes only and 
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that various modifications or changes in light thereof will be 
suggested to persons skilled in the art and are to be included 
within the spirit and purview of this application and scope of 
the appended claims. 

5 FIG. 4A is a simplified diagram of a computing system 
430 according to an embodiment of the present invention. 
This diagram is merely an example which should not unduly 
limit the scope of the claims herein. One of ordinary skill in 
the art would recognize many other variations, 

10 modifications, and alternatives. Like reference numerals are 
used in this FIG., as the previous FIG. for cross-referencing 
purposes only. As shown, the computing system 430 carries 
out certain functionality that is integrated into the method 
above as well as others. The computing system includes an 

15 accounting module 429, which carries out certain account- 
ing functions. The accounting module interfaces with mass 
memory storage 431, a microprocessing device 433, and a 
network interface device 435, which couples to local and/or 
wide area networks. The module oversees an invoicing step 

20 417 and transfer step 427, as shown. Here, the accounting 
module is a task master for the service based method for 
using the content delivery network and/or global traffic 
management network. 

Before discussing the accounting module in detail, we 

25 begin an overall method at start, step 401. The method 
connects (step 403) a client to a server location through a 
world wide network of computers. The world wide network 
of computers can include an internet, the Internet, and 
others. The connection occurs via a common protocol such 

30 as TCP/IP. The client location is coupled to a server, which 
is for a specific user. The user can be any web site or the like 
that distributes content over the network. As merely an 
example, the user can be a portal such as Yahoo! Inc. 
Alternatively, the user can be an electronic commerce site 

35 such as Amazon.com and others. Further, the user can be a 
health site. Information sites include the U.S. Patent Office 
web site, educational sites, financial sites, adult entertain- 
ment sites, service sites, business to business commerce 
sites, etc. There are many other types of users that desire to 

40 have content distributed in an efficient manner. 

In a specific embodiment, the user registers its site on the 
server, which is coupled to a content distribution server 
coupled to a global traffic management server The user 
registers to select (step 407) a service from the server. The 

45 service can be either a traffic management service (step 414) 
or a traffic management service and content distribution 
service (step 411). Depending upon the embodiment, the 
user can select either one and does not need to purchase the 
capital equipment required for either service. Here, the user 

50 merely registers for the service and pays a service fee. The 
service fee can be based upon a periodic time frequency or 
other parameter, such as performance, etc. Additionally, the 
user enters information such as the user's domain name, 
physical address, contact name, billing and invoicing 

55 instructions, and the like. Once the service has been 
requested, the user performs some of the steps noted herein 
to use the service. 

Next, the method processes (step 423) the user's request 
and allows the user to use the content distribution network 

60 and/or global traffic management network, where the user's 
web pages are archives and distributed through the content 
distribution network in the manner indicated herein. The 
user's web site should become more efficient from the use of 
such networks. Once a periodic time frequency or other 

65 frequency has lapsed (step 419), the method goes to an 
invoicing step, step 417. Here, the method accesses the 
accounting module, which can retrieve registration inform a - 
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tion about the user, service terms, invoices, accounts from an origin server to a cache server that is close to a user, 

receivables, and other information, but is not limited to this This means an origin server needs to exist that contains a 

information. The accounting module determines the service master copy of the content. If the user has an existing Web 

terms for the user, which has already registered. Once the site, the existing Web site will be the origin site, 

service terms have been uncovered from memory, the mod- 5 ,n one embodiment, the present network is comprised of 

ule determines the way the user would like its invoice. The clusters of Mrfets at P 0 "^ of presence located on many 

accounting module directs an invoicing step, which sends difi[e « nt backbone networks around the world. The servers 

(step 427) an invoice to the user. Alternatively, the process P rovide ^ ■nanagement and distnbuuon services 

continues until the periodic time frequency for the desig- *^ te * of T* ^ ' ™? ? PP ° 

nated service lapses via line 422. The invoice can be sent via 10 W™' and ™' u P lc , va " ehes of f ea f UD t ^ 

U.S. mail, electronic mail, or the like. Tbe method stops, ln a embodiment the present network includes 

step 425. Alternatively, the invoicing step can deduct mon- ? ne °' more "™- Here - °* ne,work ma y offer setvlces - 

etary consideration through an electronic card, e.g., debit mc u m „ . , „ . , , , , , , 

card, credit card. To finalize the transaction, an electronic Global Traffic Management-Provides global load 

mail message can be sent to the user, which is logged in 15 balancing across multiple origin sites, along with intel- 

memory of the accounting module. u g ent faUover and other advanced capabilities such as 

This sequence of steps is merely illustrative. The steps can persistence and static mapping, 

be performed using computer software or hardware or a 2 - Content Delivery Network (CDN)— Supports content 

combination of hardware and software. Any of the above distribution and delivery for HTTP, HTTPS and FTP. 

steps can also be separated or be combined, depending upon 20 3. Streaming — Supports distribution and delivery of 

the embodiment. In some cases, the steps can also be streaming media in many formats, such as Real Media, 

changed in order without limiting the scope of the invention Windows Media, QuickTime and others, 

claimed herein. One of ordinary skill in the art would The present CDN service has some advantages. For 

recognize many other variations, modifications, and alter- example, the CDN service helps increase the performance of 

natives. It is also understood that the examples and embodi- 25 any conventional Web site or other Internet services. It also 

ments described herein are for illustrative purposes only and helps reduce latency problems and packet loss, and it 

that various modifications or changes in light thereof will be provides for content synchronization and replication. The 

suggested to persons skilled in the art and are to be included network also reduces latency problems and packet loss, 

within the spirit and purview of this application and scope of Latency problems result when the user's request travels 

the appended claims. 30 beyond a certain distance or makes a number of network 

hops. When users request content from the web or FTP sites, 

EXAMPLE me re q Ues ts are routed through the Internet to the server. If, 

To prove the principle and operation of the present as is true for many companies, the servers are located at only 

invention, we have provided examples of a user's experience one site or a small number of sites, they will not be close to 

using the present invention. These examples are merely for 35 most of the users. Therefore, the users' request for content 

illustration and should not unduly limit the scope of the might traverse many networks to communicate with the 

claims herein. One of ordinary skill in the art would recog- desired servers. 

nize many other variations, modifications, and alternatives. Latency problems are often aggravated by packet loss. 
For easy reading, we have provided a description for a user's Packet loss, common on the Internet, tends to worsen at 
experience of a content delivery network and a user's 40 "peering points," locations where different networks con- 
experience of a global traffic management service, which is nect. One way to reduce packet loss and latency is to install 
coupled to such content delivery network. content servers closer to users and ensure that when a user 
Content Delivery Network requests data, the request is routed to the closest available 
1. Overview server. The present network has deployed web caches, 
In a specific embodiment, the invention provides a con- 45 streaming, and FTP servers throughout the Internet, on many 
tent distribution network. The following description con- networks close to end users. In addition, the network uses a 
tains information on how to use a graphical user interface to Global Traffic Manager that routes traffic to the closest, most 
monitor activity, control cache, and perform checks. In some available and least loaded server. 

embodiments, the invention also provides a way for cus- The network often synchronizes the content on the cus- 
tomer feedback to improve the service. 50 tomer's origin site with the Web cache servers on the 

The present network is substantially always available in network. When new content is placed on an origin site and 

preferred embodiments. The network includes a Network when users make requests for that content, it is automatically 

Operations Center (NOC), which is dedicated to maintaining replicated to Web cache servers in the network. When new 

the highest possible network availability and performance. content is published on the origin site with a new name, it 

In most cases, the network is supported and staffed by 55 is generally immediately available from all caches in the 

specially trained service engineers, the 24-hour, 7 day NOC present network. For example, the network user might add 

provides consultation, troubleshooting, and solutions for an object to the site where a similar object exists: 

every issue. The staff can be reached through telephone, Add "www.customer.com/images/picture2.jpg" to the 

email, fax, or online. The staff generally connects you to same site as "www.customer.conVimages^icturejpg." 

engineers and solutions, not to answering machines. 60 When a request for "picture2.jpg" arrives at a cache the 

In a specific embodiment, the network service can be used first time, the cache in the network determines that it does 

as long as the user has certain desires. For example, the user not have a copy of "picture2.jpg", and the cache will request 

has content that needs to be delivered to end-users. This a copy from the origin site. To keep in synchronization with 

content can be delivered through HTTP, HTTPS, Streaming the origin site, the caches periodically check the content they 

Media, or FTP, and the like. The server is for hosting the 65 have cached against the copy of the content in the origin site, 

content on the Internet. For standard web content, we For Web content, this is accomplished by periodically per- 

implemented a caching system to distribute web content forming an "If-modified-since" request back to the origin 
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site to see if the content has changed. This causes content 
changed on the origin site to be refreshed on the caches at 
a predefined interval. This interval can be configured 
depending upon ones needs. 

The periodic checking is a common feature of caches but 5 
if a piece of content is updated, the old content may be 
invalidated and the new content published to all the caches 
in the network. The present CDN service makes this purging 
possible with a cache control utility that allows you to 
invalidate a single object, a content directory, or an entire 10 
site contained in the caches. In a specific embodiment, cache 
control is available as part of the service — a service pro- 
vided to all customers. The present service method provides 
a comprehensive set of monitoring and administration capa- 
bilities for management of the web site. 15 

In a specific embodiment, the present service method runs 
on a secure server on the Internet and can be accessed only 
through a web browser that supports secure connections 
(SSL). Ausername and password are often assigned to a user 
or customer when signed up for the service. 20 

One of ordinary skill in the art would recognize many 
other variations, modifications, and alternatives. The above 
example is merely an illustration, which should not unduly 
limit the scope of the claims herein. It is also understood that 
the examples and embodiments described herein are for 25 
illustrative purposes only and that various modifications or 
changes in light thereof will be suggested to persons skilled 
in the art and are to be included within the spirit and purview 
of this application and scope of the appended claims. 

2. Procedures 30 

We now describe the procedures that can perform to set up 
the present CDN service and to monitor the performance of 
the Web site: 

A. Implementing the CDN; 

B. Invalidating content by controlling cache; 35 

C. Monitoring activity; and 

D. Performing tests. 

Details of each of these procedures are provided below. 
A. Implementing the CDN 

To implement the CDN, the customer only need to make 
minor changes to the web pages in order to direct user 
requests to the present Web caches instead of to the origin 
site. In a specific embodiment, the method is as simple as 
changing the pointers in the HTML. When a cache gets a 45 
request for content, it will return the requested object if it 
exists in the cache. If the content does not exist, it will 
retrieve the content from the origin site and return it to the 
user, as well as cache the content so that subsequent requests 
for that object are instantly available. 5Q 

To modify the site, the customer can either: (1) changing 
the URL; or (2) set up virtual hosting. In a specific 
embodiment, the site can be modified for redirecting a user 
requests by changing the URL in the HTML. The following 
example, a request for a picture, shows the original html and 
the revised html. 

Original homepage 

The original homepage contains the following URL: 
http://www.customer.com/page.html 
The URL contains the following HTML: 
<htmlxbody> 
Here is a picture: 
<img srco"images/picture.jpg"> 
</body></html> 

Revised homepage 65 

The "img src" tag has been revised: 

<htmlxbody> 



55 



60 



Here is a picture: 
<img 

src-" http://customer.speedera.net/www.customer.com/ 
images/picturejpg"> 
</body></html> 

With the original configuration, a user's browser requests 
the picture from the customer.com Web servers: 
page.html from www.customer.com 
images/picture jpg from www.customer.com 
With the revised configuration, a user's browser requests 
the picture from the customer.speedera.net Web servers: 
page.html from www.customer.com 

www.customer.com/images/picture.jpg from 
customer.speedera.net 

Note: If the cache does not hold the requested object in 
memory or on disk, it makes a request to the origin site and 
caches it. 

In an alternative embodiment, the method can set up 
virtual hosting so that the user's request for content is 
directed to the present CDN instead of to the origin site. 
Here, the customer can change the DNS setup to cause the 
domain name to resolve to the present network cache servers 
instead of to the original Web server. The domain name may 
be changed, for example, change the domain name from 
www.customer.com to wwx.customer.com. The present 
caches in the network can be configured in a way such that 
when they get a request for www.customer.com content they 
have not cached, they can make a request to the wwx.cus- 
tomer.com origin site to get the content. Here, the URLs in 
the Web pages may not need to be changed. 

B. Invalidating Content by Controlling Cache 

To invalidate the content contained in the caches, do the 
following: 

1. Access the user interface at: 
https://speedeye.speedera.com 

2. Find the Cache Control page (see FIG. 5A) in the 
Content Delivery section of the interface. 

3. Enter the URL in the text field. 

4. Click Submit. 

For example, if an image: 

www.customer.com/images/picture.jpg and the user 
changed the image without changing the name and the 
user wanted the change to be immediately reflected in 
all caches in the network, the user could use the present 
service to invalidate the old content, as follows: 
Enter "http://www.customer.com/images/picture.jpg" to 
invalidate the individual picture, or "http:// 
www.customer.com/images/" to invalidate all content in the 
images directory, or "http://www.customer.com" to invali- 
date all content in the domain. 

Note: Invalidating any of the above causes the change to 
"picture.jpg" to immediately be reflected in all the caches. 

C. Monitoring Activity 

In a specific embodiment, the present method allows the 
user to monitor the operation of the Content Delivery 
Network service. The present method shows how much 
content is being delivered and where it is being delivered. 
The start section of the user interface contains a table that 
shows the present domains and associated origin domains 
your account is set up to use, as shown in FIG. 5B. 

In a specific embodiment, the method includes monitoring 
recent activity, as shown in FIG. 5C. Here, the user can view 
the current and last 24 hours of content delivery traffic for a 
given domain: 



03/21/2004, EAST version: 1.4.1 



US 6,484 

13 

1) Access the user interface at: 
https://speedeye.speedera.com 

2) Find the Recent Activity page in the Content Delivery 
section of the interface. 

As shown, the has more than one graphs. The first shows 5 
the amount of traffic served by the content delivery network 
for that domain over the last 24 hours. The current traffic is 
shown on the far right. A dotted vertical line separates data 
from yesterday on the left and data from today on the right. 
A second graph on the same page (see FIG. 4) shows the io 
number of hits per second over the last 24 hours. The total 
number of hits over the last 24-hour period is shown in the 
title bar of the graph. 

In an alternative embodiment, the method includes moni- 
toring activity by location Here, the user views the last 24 * 5 
hours of content delivery traffic by location for a given 
domain: 

1. Access the user interface at: 
https://speedeye.speedera.com 

2. Find the By Location page in the Content Delivery 20 
section of the user interface. 

A world map appears (see FIG. 5D) that shows all the 
locations that served traffic for the domain. 

Below the world map is a bar graph (see FIG. 5E) that 
shows the amount of traffic served from each individual 25 
location over the last 24 hours for a given domain name. 
This graph is useful for many purposes, such as for deter- 
mining the optimal location for a second origin site — 
typically, at the location serving the most traffic, where there 
is not currently an origin site and when that location is on a 30 
different network than the existing origin site. 

D. Performing Tests 

According to the present invention, selected tests can be 
performed to check performance, as follows: 

1) Access the user interface at: 35 
https://speedeye.spedera.com 

2) Locate the Tests section. 

3) Select the test you want to perform. 

A "page check" test can be performed. This test allows the ^ 
user to check the performance of a Web page from multiple 
locations. To use the page check program, do the following: 

1) In the text field, enter the URL to test. 

2) Select the locations from which the user wants to check 
the page. 45 

3) Click Check. 

At that point, servers at the location(s) selected will be 
contacted to hit the Web page associated with the URL 
entered and time how long it takes to download the page and 
all its components. When the servers have completed down- 50 
loading the page, the results are shown in the form of tables 
and graphs. The first table (see FIG. 5F) is the overall 
performance table. It appears at the top of the results. 

In this example, the page took an average of 500 milli- 
seconds (half a second) to download from the first three 55 
locations (rows) and 1317 milliseconds (1.3 seconds) from 
the last location. A server name, physical location, and 
network location identify each location. For example, the 
last location in FIG. 5G is labeled as "server-4/sterling/ 
exodus." This label identifies a server on the Exodus net- 60 
work located in Sterling, Va., USA. 

After the overall timetable, details for each location are 
presented in individual tables. FIG. 5H shows a table 
containing the details for the location "server-14, dc, cw, a 
server located on the Cable & Wireless Network in Wash- 65 
ington D.C, USA. The IP address of the actual server is 
shown in the heading of the table so you can perform 
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additional tests, if needed, (traceroute and so on) on the 
actual server performing the test. 

The Location table in FIG. 5H shows data for the 
www.speedera.com Web site. The graph shows the perfor- 
mance for downloading specific components of the page. 
This table shows that the majority of the time spent in the 
download was spent downloading the home page itself. The 
remainder of the content (all the gifs on the subsequent lines) 
has been cached and is delivered from the closest and least 
loaded available server within the CDN, in a fraction of the 
time. These cached items have a domain name of 
www.speedera.net. 

In a specific embodiment, the colors in the graph show the 
different components of the download including the DNS 
lookup time, connect time, and so on. The first time a page 
is checked, the DNS times will likely be very high. This high 
reading results from the way DNS works in the Internet, If 
a domain name is not accessed within a specific amount of 
time (the timeout period), the information will expire out of 
the DNS caches. The first request will again need to walk 
through the Internet's hierarchical system of DNS servers to 
determine which one is authoritative for a given domain 
name. 

To get even more accurate results, a page can be hit twice, 
where the results from the second hit are used. This will give 
a more accurate representation of what the performance is 
like when the page is being hit on a regular basis. The graph 
is followed by the actual raw data that makes up the graph. 
Each row displays the following elements: 

URL. The URL component downloaded 

IP Address. The IP address of the server contacted to get 
the data 

ERR. The error code (where 0 is no error) 
HRC. The HTTP response code (where 200 is OK) 
LEN. The length of the data downloaded 
CHK. A checksum of the data 
STT. The timing in milliseconds for the start time 
DRT, DNS response time in milliseconds 
COT. Connection Time— Syn/SynAck/Ack Time 
DST. Data start time when first packet is downloaded 
FNT. Final time when download is complete 
END. The total millisecond timings for portions of the 
connection 
Global Traffic Manager 

The present invention provides a global traffic manager. 
The global traffic manager is coupled to the content delivery 
network. The following provides a description of the global 
traffic manager. The description is merely an illustration, 
which should not unduly limit the claims herein. One of 
ordinary skill would recognize many other variations, 
alternatives, and modifications. 
1. Procedures 

To use the Global Traffic Management service, the fol- 
lowing will be used: 

A. Domain name representing a service. 

The domain name can be delegated for which the users are 
authoritative so that the present servers are contacted to 
resolve the domain name to an IP address, or addresses. 
Alternatively, we can create a domain name for you. That 
name will end with speedera.net, such as customer.speed- 
era.net. 

B. More that one IP address associated with that service. 
Obtaining more that one IP address for a given service 

provides the following benefits from the Global Traffic 
Management service: 
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Provides better service for clusters of servers on multiple Procedures 

networks. If a location within a cluster fails, or the network This section describes the procedures you can perform to 

associated with that location fails, the system can route implement and then monitor the performance of the Global 

traffic to another available network because there is more Traffic Management service. To implement the Global Traf- 

than one IP address. The system also provides better per- 5 fic Management service, the customer or user does the 

formance by sending user requests to the closest cluster of following: 

servers. These routing options are not available if a local 1. Sign up for the service. 

load balancer is used to manage the cluster, since a local load 2. Contact the server location and provide the following 

balancer requires that each cluster of servers use a single IP information: The domain name of the service you want 

address. 10 me system to manage; The IP addresses associated with 

Provides better service for clusters of servers on a single mat service; A description of the service and how it 

network. If each computer has a different IP address, the should ^ tested for performance md availability; The 

Global Traffic Management service can be used to load- mlerval ^ which Usts should be performed; 

balance between individual computers. ^ check shou , d Jook f such ^ dfic 

Reduces latency 15 information in a returned Web page. Whether the user 

attached to multiple network teeds. In this configuration, the " . , ... A ~. . , 4 , *i ° 4 — . 

Global Traffic Management can route around network fail- would ^ e " affic wei S hted f° mal more traffic 15 5601 

ures by testing each of the network connections and by t0 one IP address over anotl l er 

routing user requests to the closest working connection. In addltl0n t0 lhe normal routm g failures 10 the 

In a specific embodiment, the present network is com- closest server, the system can also be set up for security 

prised of clusters of servers at points of presence located on 20 purposes. The system can contain hidden IP addresses that 

many different backbone networks around the world. The are only given out in the case of failure of other IP addresses, 

servers provide global traffic management and distribution The user might want to use this feature to prevent a denial 

services for content of many kinds, including support for of service attack. If one IP address is attacked and becomes 

HTTP, HTTPS, FTP, and multiple varieties of streaming unavailable, another will then appear and traffic will be 

media. As previously noted, the services include: Global 2 $ routed to it. This can make attacking a Web server more 

Traffic Management — Provides global load balancing across difficult since the IP address is not published until the failure 

multiple origin sites, along with intelligent failover and occurs. 

other advanced capabilities such as persistence and static In a specific embodiment, the method allows the user to 

mapping; Content Delivery Network ( C D N> — ■ Sup ports monitor the operation of the Global Traffic Management 

content distribution and delivery for HTTP, HTTPS and 30 service for domain names. Preferably, the method outputs 

FTP; and Streaming — Supports distribution and delivery of information on a Web-based, user- interface that runs on a 

streaming media in many formats, such as Real Media, secure server on the Internet that can be accessed only 

Windows Media, QuickTime and others. through a web browser that supports secure connections 

The present Global Traffic Management service routes (SSL). Here, a start section of the user interface contains a 

user requests to the closest available and least-loaded server. 35 table that shows all the domains and associated origin 

The service also tests the servers it manages for service domains your account is set up to use. See FIG. 6 A. 

performance and availability, using actual application-level In an alternative embodiment, we can also view the last 24 

sessions. When a service test fails, the system reroutes the hours of traffic management activity for a given domain: 

traffic to other available servers. The Global Traffic Man- 1) Access the user interface at: 

agement service is based on Domain Name Service (DNS). ^ https://speedeye.speedera.com 

The Internet uses the DNS to allow users to identify a 2 ) Find the Recent Activity page in the Traffic Manage- 

service with which they want to connect. For example, ment section of the interface. 

www.speedera.com identifies the Web service (www) from ^ main graph in me page shows how traffic was routed 

speedera.com. over me last 2 4 hours. A dotted vertical line separates 

When users request a service on the Internet, they request 4S yesterday on the left from today on the right. The fines in the 

it by its DNS name. DNS names were created to make it graph show now many times each IP address was given out. 

easier for users to identify computers and services on the § ee tne example in FIG 6B 

Internet. However, computers on the Internet do not com- In the example> the present Global Traffic Management 

municate with each other by their DNS names Therefore, systcm made 19812 o traffic routing decisions over a 24-hour 

when a user enters a domain name, domain name servers on 50 period lower decision line in the graph represents an IP 

the Internet are contacted to determine the IP addresses address for « D elhi, India." The upper decision line repre- 

associated with that name. ^ IP address for "Santa Clara, Calif.; United States." 

Tlie Network includes specialized domain name servers y axis represents the activity levels. The X axis repre- 

that use advanced mechanisms to determine the IP addresses ^ the Santa Clara time: N for nQ0Uf p for p . m ^ md A for 

associated with a given domain name and service. These 55 a m 

servers work seamlessly with the Internet DNS system. To ' At 6:00 a m in Santa Qara> 0Qe Une dropp ed to the 

determine the best IP address, or addresses, to return when bottom of me graph and the other spiked upward. This 

a user requests a service on the Internet, the DNS system happened because the system routed around a failure at a 

does the following: data center tne "Delhi" IP address failed its service 

1. Uses IP addresses to monitor the performance of a 60 test, the Global Traffic Management system routed traffic to 
service on individual computers or clusters of comput- the "Santa Clara" IP address. 

ers The example also shows that the "Delhi" IP address is 

2. Determines latency and load metrics between users and more active at night (Santa Clara time), and the "Santa 
servers on the Internet Clara" IP address is more active in the daytime. The differ- 

3. Performs tests on the Internet to determine the quality 65 ence in activity results from the changes in time zones, 
of service a user would receive when connecting to a When people in India are active, the traffic manager routes 
specific computer or cluster of computers their requests to the closest available server with the best 
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service response time. For users in India, when it is their 
daylight and their peak time, the best IP address is often the 
site in Delhi. For users in the U.S., when it is their peak time, 
the best IP address is the site in Santa Clara. 

In still an alternative embodiment, we can view the last 24 5 
hours of traffic management activity by location for a given 
domain: 

1. Access the user interface at: 
https://speedeye.speedera.com 

2. Find the By Location page in the Content Delivery 10 
section of the user interface. 

Here, a world map and a bar chart appear. They show 
where the traffic manager routed traffic (geographic and . 
network locations) over the last 24 hours for a given domain 
name. See the example in FIG. 6C. The bar<;hart example 15 
shows the number of times each location was chosen to 
serve traffic over the last 24 hours. In the example, the traffic 
manager chose the "UUNET/sclara"(Santa Clara, Calif.; 
United States) location to serve most of the traffic. 

In other aspects, the method includes performing tests. 20 
Here, the interface also contains a utility that allows the user 
to check a Web page from multiple locations. If an HTTP 
service is used, a quick status check can be executed as 
follows: 25 

1) Access the user interface at: 
https://speedeye.spedera.com 

2) In the text entry field, enter the URL for the page you 
want to check. 

3) Select the locations from which you want to check the 30 
page. 

4) Press the Check button. This causes servers at the 
location, or locations, selected to download the Web 
page associated with the URL you entered in Step 2. 

When the servers have completed downloading the page, 35 
the page-performance results are shown in the form of tables 
and graphs. The first table (see FIG. 6D) is the overall 
performance table. It appears at the top of the results. In this 
example, the page took an average of 500 milliseconds (half 
a second) to download from the first three locations (rows) 40 
and 1200 milliseconds (1.2 seconds) from the last location. 

A server name, physical location, and network location 
identify each location. For example, the last location in FIG. 
6D is labeled as "server-4/sterling/exodus." This label iden- 
tifies a server on the Exodus network located in Sterling, Va., 45 
USA. 

After the overall timetable, details for each location are 
presented in individual tables. FIG. 5 shows a table con- 
taining the details for the location "server-14, dc, cw, a 
server located on the Cable & Wireless Network in Wash- 50 
ington D.C., USA. The IP address of the actual server is 
shown in the heading of the table so you can perform 
additional tests, if needed, (traceroute and so on) on the 
actual server performing the test. The Location table in FIG. 
6E shows data for the www.speedera.com Web site. 55 

The graph in FIG. 6E shows the performance for down- 
loading specific components of the page. This table shows 
that the majority of the time spent in the download was spent 
downloading the home page itself. 

The colors in the graph show the different components of 60 
the download including the DNS lookup time, connect time, 
and so on. The first time you check a page, the DNS times 
will likely be very high. This high reading results from the 
way DNS works in the Internet. If a domain name is not 
accessed within a specific amount of time (the timeout 65 
period), the information will expire from the DNS caches. 
The first request will again need to walk through the 
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Internet's hierarchical system of DNS servers to determine 
which one is authoritative for a given domain name. 

To get more accurate results, a page can be hit twice and 
the results from the second hit can be used. This will give 
you a more accurate representation of what the performance 
is like when the page is being hit on a regular basis. In the 
Location Table, the graph is followed by the actual raw data 
that makes up the graph. Each row displays the following 
elements: 

URL. The URL component downloaded 
IP Address. The IP address of the server contacted to get 
the data 

ERR. The error code (where 0 is no error) 
HRC. The HTTP response code (where 200 is OK) 
LEN. The length of the data downloaded 
CHK. A checksum of the data 
STT. The timing in milliseconds for the start time 
DRT. DNS response time in milliseconds 
COT. Connection Time— Syn/SynAck/Ack Time 
DST. Data start time when first packet is downloaded 
FNT. Final time when download is complete 
END. The total millisecond timings for portions of the 
connection 

In a specific embodiment, the Global Traffic Management 
system automatically routes around failures to services on 
the IP addresses it manages. Here, the system can also be: 
Adding or removing a domain name from the system; 
Adding or removing IP addresses from the system; and 
Changing the way a service is monitored. 

It is also understood that the examples and embodiments 
described herein are for illustrative purposes only and that 
various modifications or changes in light thereof will be 
suggested to persons skilled in the art and are to be included 
within the spirit and purview of this application and scope of 
the appended claims. All publications, patents, and patent 
applications cited herein are hereby incorporated by refer- 
ence for all purposes in their entirety. 

What is claimed is: 

1. A service based system for traffic management and 
content distribution for a plurality of users over a world wide 
network of computers, the system comprising: 

a global traffic management device coupled to a world 
wide area network, the global traffic management 
device being provided to load balance traffic for a 
customer across multiple customer origin sites; 

a content delivery network coupled to the global traffic 
management device, the content delivery network pro- 
viding content distribution and delivery of any of: static 
Web page content or streaming media, for the cus- 
tomer; 

a computing device including a computer memory 
coupled to the global traffic management device; and 

an accounting module coupled to the computing device, 
the accounting module being provided to track a usage 
of the global traffic management device and the content 
delivery network for the customer of the global traffic 
management device and the content delivery network 
to determine a service fee to the customer of the global 
traffic management device and the content delivery 
network for the usage based upon a period time fre- 
quency. 

2. The system of claim 1 wherein the periodic time 
frequency is selected from an hour, a week, a month, a 
quarter, or a year. 
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3. The system of claim 1 wherein the content distribution an accounting module coupled to the computing device, 
network comprises a plurality of content servers, each of the the accounting module being provided to track a usage 
content servers being spatially disposed in a geographical of the global traffic management device and the content 
marmer delivery network for the customer of the global traffic 

4. The system of claim 1 wherein the content distribution 5 management device and the content delivery network 
and delivery is for at least HTTP, HTTPS and FTP. 10 determine a service fee to the customer of the global 

5. The system of claim 1 wherein the streaming media is traffic management device and the content delivery 
selectedfromRealMedia,WindowsMedia,andQuickTime. f work fo < the W ba ^ d , u P on a P eriod Ume 

6. The system of claim 1 wherein the global traffic ^T%' ^ a ^ ntia f module comprising: 
management system comprises a plurality of management io a first cc^e du-ected to retnevmg invoiang information 
agents being distributed throughout the content distribution from * he ™ m P uter , ^ em °7; and . . f 
network a seconci cocie directed to determining a service fee 

D V The system of claim 1 wherein the customer of the based u P° n the mvoicin S informa *>* &™ the com- 

content distribution network is an Internet commerce com- P u er * . , . i _ , . . . . . . 

13. The system of claim 12 wherein the invoicing mfor- 

pany. 15 J . ,, , - ° 

S mesystemofclaimlwhereintheusageofthecoDtent matron comprises an _address and a service fee. 

distribution network reduces a latency of web pages of the , ^ ^ °f f m 12 wherem the fee 18 

customer to a user based upon a periodic frequency. 

9. The system of claim 1 wherein the global traffic . 15 - ™' . of f claim I 12 t^ Dl ^ U ' 
management device reduces a latency of web pages of the 20 tton and dehvery is for at least HTTP, HTTPS and FTP 

customer system of claim 12 wherein the customer is free 

. r i • 1 I. • .1. from paying a capital fee toward the usage of the content 

10. The system of claim 1 wherein the service fee is a one " , . v 7 Z i iun«= * * - 

^ f 3 delivery network and the global traffic management device. 

"n. The system of claim 1 wherein the global traffic ™ e of whe , r ? th f CUSt0mer ° f the 

management system provides intelligent failover for origin 25 content distribution network is an Internet commerce com- 

sites pany. 

i f% a WmA f„ m „„ nn »r»^t « n A 18. The system of claim 12 wherein the Internet com- 

12. A service based system for traffic management and • i_ i * , t , . 

. . i ■ . »■_ . ' r 1 1-* r u -j merce company is a book store, a business to business site, 

content distribution for a plurality of users over a world wide ^ , T , 4L Z , « •* 

t r it r • • j • . g a portal, a health site, and a finance site, 

network of computers, the service based system being free vri, 4 f i - +<% u • .u e *u 

e i j-^ * i t>* / j il ■ 19. The system of claim 12 wherein the usage of the 

from capital expenditure to the plurality of users and bemg 30 x ;- '.'{7 ; , - . . . 

., *, • r . • • content distribution network reduces a latency of web pages 

provided on periodic service fees, the system comprising: TV " J * & 

r « , , „. , . , , , , of the customer to a user. 

a global traffic management device coupled to a world 2Q ^ system of daim u wherein the customer of the 

wide area network, the global traffic management contem distribution network is an Internet commerce corn- 
device being provided to load balance traffic for a 

customer across multiple customer origin sites; 35 ^ ^ system q{ c]gM u wherein the periodic ^ 

a content delivery network coupled to the global traffic frequency is selected from an hour, a week, a month, a 

management device, the content delivery network pro- quarter, or a year. 

viding content distribution and delivery of any of: static 22. The system of claim 12 wherein the global traffic 

Web page content or streaming media, for the cus- ^ management system provides intelligent failover for origin 

tomer; sites, 
a computing device including a computer memory 

coupled to the global traffic management device; and * * * * * 
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